Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
File:                     9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft (raw, json)
Hash identifier:          TmJXqIzedn8WbWwg5tMPzxIhS7qKQR0e43/PG205oJg=
Subject key identifier:   52:50:F1:6C:CF:5C:01:07:82:1C:CE:18:86:55:0D:10:AF:C1:8A:93
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       3A8F7DCD98961C0A015D766DD70C468FB09E333F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
Manifest number:          45
Signing time:             Fri 29 Nov 2024 06:23:04 +0000
Manifest this update:     Fri 29 Nov 2024 06:18:04 +0000
Manifest next update:     Sat 30 Nov 2024 08:24:04 +0000
Files and hashes:         1: 323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (hash: hmMHHeJRSGr82SwNrmmok2/PX4gWJw42ZTyIOtk7OEA=)
                          2: 323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (hash: nmoDArWRO0uLHbSAC4h2F96tm5C0wVkRpDyqnAkDCMY=)
                          3: 323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa (hash: aKfiWJVrKweBQK/uEfhoatdC1VlCcAmXFAwmXZnxZic=)
                          4: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl (hash: 0yvm+59b058lVVMkyOaluyXUH4HC2OMLSDJ8jxs6gNM=)
                          5: 323830343a326437303a3338303a3a2f34312d3431203d3e20323635323832.roa (hash: NM19uogG2PQ1sn58KH5mCEVUZEoPYPuLaMBp+sUjB10=)
                          6: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (hash: PBAVWDEZ/8URUjnI7xWp37tBWzT+HtUN4BzJA9/c93Q=)
                          7: 323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (hash: eBtsdDY81NfMBsgLEmJXeXJKkUKD+uNzTdp7rZYUx2M=)
                          8: 323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (hash: dVARaFVMdMdHQ6Bld5pZ0sktZQcdpKzswuC/8qU7v78=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:7d:cd:98:96:1c:0a:01:5d:76:6d:d7:0c:46:8f:b0:9e:33:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Nov 29 06:18:04 2024 GMT
            Not After : Nov 30 08:24:04 2024 GMT
        Subject: CN=5250F16CCF5C0107821CCE1886550D10AFC18A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:16:a0:20:f8:ba:39:59:b1:33:a1:36:ac:
                    99:e2:26:dc:2c:da:47:eb:59:23:71:5b:ff:c0:c5:
                    53:15:70:31:9e:08:79:d9:e9:38:24:7d:16:1d:6b:
                    99:f2:27:37:d1:2e:73:ac:7f:8e:b5:f7:00:98:8a:
                    b0:56:e3:03:84:b7:89:03:3f:45:19:7f:81:50:1d:
                    d5:ce:f0:14:86:59:81:53:f2:1a:2a:68:ad:00:42:
                    85:ac:b4:38:80:60:02:bc:c1:3c:d9:b9:03:33:d0:
                    43:d3:c6:12:e9:59:aa:23:7a:a5:c6:9a:72:90:5a:
                    17:eb:79:17:b9:81:4b:e7:e6:3b:9a:f5:ee:7e:82:
                    f1:b6:e1:6d:19:a3:cd:fc:39:b0:60:91:2a:78:47:
                    1d:d4:ee:48:f0:f9:2a:ed:7a:b9:be:25:32:d5:59:
                    da:d6:06:7b:eb:1f:e4:b9:2d:3d:7f:60:a6:28:3a:
                    04:21:05:7a:03:1a:d3:da:1b:f6:10:87:45:38:1f:
                    9e:ca:6c:e6:53:48:04:33:fe:da:58:73:6b:8f:db:
                    75:c4:3c:97:ba:78:c9:69:6c:df:ed:fc:1f:51:cc:
                    cc:3a:2b:24:89:04:7c:1f:68:d3:07:42:c1:7b:01:
                    82:24:46:02:07:31:49:17:e3:bd:e7:93:a1:15:df:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:50:F1:6C:CF:5C:01:07:82:1C:CE:18:86:55:0D:10:AF:C1:8A:93
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:b4:c0:75:37:07:5e:d1:bc:93:ca:49:13:65:4c:8e:f0:
         51:31:55:ce:f5:ae:04:12:2f:7f:d5:18:80:cc:81:e8:d1:f2:
         43:cc:70:07:e9:a5:fc:62:87:9b:c7:f9:e5:02:22:80:9b:dd:
         c2:9e:04:c6:b1:c1:cf:07:98:11:72:3c:32:f3:cb:d0:8c:cd:
         c2:28:8b:7b:f8:84:e4:6d:09:cd:24:d8:68:72:19:a5:de:3e:
         0f:e0:44:7d:58:34:80:64:8d:95:0f:c0:3b:97:84:8d:38:c6:
         cc:72:cc:16:92:cd:f7:bb:48:3e:f0:7e:3f:a1:32:70:c8:6c:
         0b:94:75:7f:3e:8d:d3:b0:bc:a0:06:bd:e5:f6:ef:57:65:20:
         e4:68:c6:9c:77:6a:29:26:5c:69:bf:51:9a:7e:10:26:bc:3e:
         a0:27:f8:df:8d:44:e7:30:16:6d:3e:0f:af:f4:0b:ee:b8:6a:
         f5:39:f2:35:1f:f7:c8:0e:ce:34:02:6a:af:d8:af:7b:9d:25:
         00:91:06:33:fe:1e:e0:ae:d5:ce:45:c3:d2:79:2b:58:34:55:
         e6:63:9f:e1:8a:62:9a:01:0c:b3:7e:ad:ee:10:59:86:58:fc:
         42:5e:72:34:95:70:72:dd:70:3b:ce:a5:d0:72:c0:8a:8a:7c:
         1f:6d:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:39 2024 by rpki-client on console-fra.rpki-client.org